Apparatus for data copyright management system

ABSTRACT

A data copyright management apparatus is used with a user terminal and comprises a CPU, a CPU bus, ROM, EEPROM, and RAM. The CPU, ROM, EPROM, and RAM are connected to the CPU bus, and a system bus of a device which utilizes the data can be connected to the CPU bus. A data copyright management system program, crypt algorithm, and user information are stored in the ROM, and a second private-key, a permit key, a second secret-key, and copyright information are stored in the EEPROM. A first public-key, a first private-key, a second public-key, and a first secret-key are transmitted to the RAM during operation. The data copyright management apparatus may be configured in the form of a monolithic or hybrid IC, a thin IC card, PC card, and insertion board which have a unique terminal. If a copyright management program is supplied externally, it is stored in the EEPROM. Otherwise, it is stored in the ROM. In addition to a microprocessor of a user terminal which decrypts encrypted data for displaying and processing and re-encrypts the decrypted data for storing, copying, or transferring, at least one microprocessor, desirably two microprocessors, are added for decrypting and re-encrypting data which is encrypted and supplied. The microprocessors to be added may be connected to a system bus of the microprocessor of the user terminal. It is desirable that a multiprocessor configuration is implemented by using a SCSI bus, PCI bus, or SCI bus. Apparatus for decryption and re-encryption may be configured separately or as a unit. A device which is used to input and output encrypted data may be connected directly to the apparatus for decryption and re-encryption. The data copyright management apparatus may be implemented in the form of a monolithic IC, a hybrid IC, or a built-in subboard, and the apparatus in these forms may be incorporated in a computer, television set, set-top box, digital video tape recorder, digital video disk recorder, digital audio tape apparatus, or personal digital assistants, and the like.

This application is a continuation of application Ser. No. 08/882,909filed Jun. 26, 1997, now U.S. Pat. No. 6,128,605, which is acontinuation of application Ser. No. 08/549,270 filed Oct. 27, 1995,which was abandoned.

BACKGROUND OF THE INVENTION

1. Field of the Invention

The present invention relates to an apparatus for displaying, storing,copying, editing or transferring digital data, and protecting digitaldata copyrights.

2. Background Art

In the information-oriented society of today, database systems arebecoming wide spread in which it is possible to use various types ofdata, stored independently in each computer in the past, by connectingcomputers via communication lines.

In such a database system, the information handled up to this point hasbeen conventionally coded information that can be processed by acomputer, and that contains a relatively small amount of information andmonochrome binary data, such as facsimile information at most. It is notpossible to handle data containing a relatively large amount ofinformation, such as data for natural pictures or animation.

With the rapid progress of digital processing technique for variouselectric signals, a technique is under development for digitalprocessing of picture signals other than binary data, handled only asanalog signals in the past.

By digitizing the picture signal, it is possible to handle a picturesignal, e.g., a television signal, by a computer. “Multimedia systems”is an emerging technology of the future capable of simultaneouslyhandling the data handled by computers and digitized picture data.

Because picture data contains an overwhelmingly large amount ofinformation compared with character data and audio data, it is difficultto store or transfer or process the picture data by computer. For thisreason, techniques for compressing or expanding picture data have beendeveloped. Further, several standards for compression/expansion ofpicture data have been established. For example, the following standardshave been established as common standards: JPEG (Joint Photographicimage coding Experts Group) standards for still pictures, H.261standards for video conferences, MPEG1 (Moving Picture image codingExperts Group 1) standards for picture accumulation, and MPEG2 standardsfor current television broadcasting and high definition televisionbroadcasting. By using these new techniques, it is now possible totransmit digital picture data in real time.

For analog data, which has been widely used in the past, the control ofcopyrights during processing has not been an important issue because thequality of the analog data deteriorates each time the data is stored,copied, edited, or transferred, the editing of a copyright produced dueto the above operation has not been a large problem. However, thequality of digital data does not deteriorate when the data is repeatedlystored, copied, edited, or transferred. Therefore, the management andcontrol of copyrights during processing of digital data is an importantissue.

Up to now, there has been no adequate method for management and controlof copyrights for digital data. It has been managed and controlledmerely by copyright law or by contracts. In copyright law, onlycompensation for digital sound or picture recording devices has beenprescribed.

It is possible not only to refer to the content of a database, but alsoto effectively utilize the data obtained from the database by storing,copying, or editing the data, and also transferring the edited data tothe database with the edited data registered as new data. Further, it ispossible to transfer edited data to other persons via a communicationlink or by a proper recording medium.

In a conventional database system, only character data is handled.However, in multimedia systems, sound data and picture data originallygenerated as analog data, are digitized and used as part of the databasein addition to the other data in the database such as character data.

Under such circumstances, it is an important question to determine howto handle copyrights of the data in the database. However, there are nomeans in the prior art for copyright management and control of suchactions as copying, editing, transferring, etc. of data.

Although data from “Software with advertisement” or “free software” isgenerally available free of charge, it is copyrighted and its use may berestricted by the copyright depending on the way it is used.

The inventors of the present invention proposed a system for copyrightmanagement, wherein a permit key is obtained from a key control centervia a public telephone line in Japanese Patent-Laid Open No. 46419/1994and Japanese Patent Laid-Open No. 141004/1994. Japanese Patent Laid-OpenNo. 132916/1994 to the same inventors also discusses an apparatus forcopyright management. Furthermore, the same inventors proposed a systemfor managing a copyright of digital data in Japanese Patent ApplicationNo. 64889/1994 and Japanese Patent Application No. 237673/1994.

In these systems and apparatus, one who wants to view and listen toencrypted programs requests viewing from a control center via acommunications line by using a communication device. The control centersends a permit key to the requester, performs charging and collects afee.

After receiving the permit key, the requester sends the permit key to areceiver by using an on-line or off-line means. The receiver thendecrypts the encrypted programs using the permit key.

The system disclosed in Japanese Patent Application No. 64889/1994 usesa program and copyright information for managing the copyright, inaddition to the permit key, so that the copyright for display (includingsound processes), storage, copying, editing, or transferring of thedigital data in the database system, including real-time transmission ofa digital picture, can be managed. The program for managing thecopyright watches and manages to prevent a user from using the digitaldata outside the conditions of the user's request or permission.

Japanese Patent Application No. 64889/1994 further discloses that datais supplied in encrypted form from a database, decrypted by a copyrightmanagement program when displayed or edited, and encrypted again when itis stored, copied or transferred. Also, the copyright managementprogram, being encrypted, is decrypted by a permit key. The copyrightmanagement program thus decrypted performs encryption and decryption ofcopyright data, and when data is utilized other than for storage anddisplay, copyright information including information about the user,being stored as a history in addition to the original copyrightinformation, is disclosed.

A general description of cryptography is provided below. Cryptographyincludes a secret-key cryptosystem and a public-key cryptosystem.

The secret-key cryptosystem is a cryptosystem using the same crypt keyfor encryption and decryption. While this cryptosystem requires only ashort time for encryption or decryption, if the secret-key is found, thecryption may be cryptanalized.

The public-key cryptosystem is a cryptosystem in which a key forencryption is open to the public as a public-key, and a key fordecryption is not open to the public. The key for encryption is referredto as a public-key and the key for decryption is referred to as aprivate-key. To use this cryptosystem, it is necessary that the partytransmitting information encrypts the information with the public-key ofthe party receiving the information. The party receiving the informationdecrypts the information with a private-key not open to the public.While this cryptosystem requires a relatively long time for encryptionor decryption, the private-key cannot easily be found, and it is verydifficult to cryptanalyze the cryption.

In cryptography, a case of encrypting a plaintext M with a crypt key Kto obtain a cryptogram C is expressed as

C=E(K, M)

and a case of decrypting the cryptogram C with the crypt key K to obtainthe plaintext M is expressed as

M=D(K, C).

The cryptosystem used for the present invention uses a secret-keycryptosystem in which the same secret-key Ks is used for encryption anddecryption, and a public-key cryptosystem in which a public-key Kb isused for encryption of plaintext data and a private-key Kv is used fordecryption of a cryptogram.

FIG. 1 shows a structure of the data copyright management systemdisclosed in the prior Japanese Patent Application No. 237673/1994, inwhich the apparatus for data copyright management system of the presentinvention can be used.

In this system, encrypted data is supplied via two-way communication inaccordance with a request from the primary user 4.

This system uses the secret-key cryptosystem and the public-keycryptosystem as a cryptosystem.

It will be obvious that this system can be applied when using asatellite broadcast, ground wave broadcast, CATV broadcast or arecording medium other than a database as the data supply means providedwith advertisement requiring no charge or encryption.

In this system, reference numeral 1 represents a database, 4 representsa primary user terminal, 5 represents a secondary user terminal, 6represents a tertiary user terminal, and 7 represents an n order userterminal. Also, reference numeral 3 represents a copyright managementcenter, 8-10 represent a secondary copyright data, tertiary copyrightdata, and n-order copyright data, respectively, stored at the copyrightmanagement center 3. Reference numeral 2 represents a communicationnetwork such as a public telephone line offered by a communicationenterprise or a CATV line offered by a cable television enterprise.

In the above arrangement, the database 1, primary user terminal 4,secondary user terminal 5, tertiary user terminal 6, n-order userterminal 7, and copyright management center 3 are connected to thecommunication network 2. They can also be connected each other.

In FIG. 1, a path shown by a broken line represents a path for encrypteddata. A path shown by a solid line represents a path of requests fromeach user terminal. A path shown by a one-dot chain line represents apath through which a crypt key and authorization informationcorresponding to a utilization request for data are transferred. A pathshown by a two-dot chain line represents a path through which copyrightinformation is transferred from the database or from one data element toa next-order data element within the copyright management center.

Each user who uses this system has previously been entered in thedatabase system and has been provided with database utilizationsoftware. The database utilization software includes a program fordecrypting an encrypted copyright management program in addition tonormal communication software such as data communications protocols.

To use the database 1, a primary user prepares primary-userauthentication data Au1, a first public-key Kb1, a first private-key Kv1corresponding to the first public-key Kb1, a second public-key Kb2, anda second private-key Kv2 corresponding to the second public-key Kb2. Theprimary user accesses the database 1 from the primary user terminal 4via the communication network 2.

The database 1, receiving the primary-user authentication data Au1,first public-key Kb1 and second public-key Kb2 from the primary user,confirms the primary-user authentication data Au1 and transfers theconfirmed primary-user authentication data Au1 to the secondarycopyright management center 3 as the primary user information Iu1.

The database 1 prepares two secret-keys, first secret-key Ks1 and secondsecret-key Ks2. The second secret-key Ks2 is transferred to thecopyright management center 3.

As the result of the above transfer, a permit key corresponding toprimary utilization, the primary user information Iu1, originalcopyright information Ic0 and the second secret-key Ks2 are stored inthe copyright management center 3. In this case, the original copyrightinformation Ic0 is used for copyright royalties distribution.

When a primary user who desires data utilization accesses the database 1from the primary user terminal 4, a data menu is transferred to him. Inthis case, information for charges may be displayed together with thedata menu.

When the data menu is transferred, the primary user retrieves the datamenu and selects the data M. In this case, the original copyrightinformation Ic0 of the selected data M is transmitted to the copyrightmanagement center 3. The primary user selects permit key Kp1corresponding to the required form of the usage such as viewing,storing, copying, editing and transferring of data. Permit key Kp1 isalso transmitted to the copyright management center 3.

Because viewing and storing of data are the minimum required forms ofuse for the primary user, these forms of use may be excluded from thechoices, thus offering only copying, editing and transferring aschoices.

The original data MO is read out of the database 1 in accordance with arequest of the primary user. The read original data MO is encrypted bythe first secret-key Ks1:

Cm 0 KS 1=E(Ks 1,M 0)

The encrypted data Cm0ks1 is provided with the uncrypted originalcopyright information Ic0.

The first secret-key Ks1 is encrypted by the first public-key Kb1 andthe second secret-key Ks2 is encrypted by the second public-key kb2:

Cks 1 Kb 1=E(Kb 1 ,Ks 1)

Cks 2 Kb 2=E(Kb 2 ,Ks 2)

While the copyright management program P is also encrypted by the secondsecret-key Ks2:

CpKs 2=E(Ks 2 P),

the copyright management program P may not always be encrypted by thesecond secret-key Ks2 but it may be encrypted by any other proper cryptkey.

The encrypted original data Cm0ks1, encrypted copyright managementprogram Cpks2, and two encrypted secret-keys Cks1kb1 and Cks2kb2 aretransferred to the primary user terminal 4 via the communication network2 and charged, if necessary.

It is possible to store the encrypted copyright management program Cpks2in means such as in a ROM in the user terminal 4 instead of supplying itfrom the database 1.

The primary user receiving the encrypted original data Cm0ks1, twoencrypted secret-keys Cks1kb1 and Cks2kb2, and encrypted copyrightmanagement program Cpks2 from the database 1 decrypts the encryptedfirst secret-key Cks1kb1 with the database utilization software usingthe first private-key Kv1 corresponding to the first public-key Kb1:

Ks 1=D(Kv 1,Cks 1 kb 1),

and decrypts the encrypted second secret-key Cks2kb2 using the secondprivate-key Kv2 corresponding to the second public-key Kb2:

Ks2=D(Kv 2,Cpks 2).

The primary user decrypts the encrypted copyright management programCpks2 using the decrypted second secret-key Ks2:

P=D(Ks 2,Cpks 2).

Finally, the primary user decrypts the encrypted data Cm0ks1 by thedecrypted copyright management program P using the decrypted firstsecret-key Ks1:

M 0=D(Ks 1,Cm 0 ks 1)

and uses the decrypted original data M0 directly or data M1 as edited.

As described above, the first private-key Kv1 and second private-key Kv2are crypt keys prepared by the primary user but not open to others.Therefore, even if a third party obtains the data M, it is impossible touse the encrypted data M by decrypting it.

Thereafter, to store, copy, or transfer the data M as the original dataM0 or the edited data M1, it is encrypted and decrypted using the secondsecret-key Ks2:

Cmks 2=E(Ks 2,M)

M=D(Ks 2,Cmks 2)

The decrypted second secret-key Ks2 is thereafter used as a crypt keyfor encrypting/decrypting data when storing, copying, or transferringthe data.

The first private-key Kv1 and second private-key Kv2, the firstsecret-key Ks1 and second secret-key Ks2, the data M, the copyrightmanagement program P, the original copyright information Ic, theoriginal copyright information Ic0 and copyright information Ic1,containing information about the primary user and the editing date andtime, are stored in the primary user terminal 4.

Further protection is provided by attaching the copyright informationIc1 to the data as copyright information label, and adding the digitalsignature.

The encrypted data Cmks2 is encrypted to be distributed. Since thecopyright information label provides a clue to obtain the secondsecret-key Ks2 which is the key for decryption, the second secret keyKs2 cannot be obtained in the case where the copyright information labelis removed from the encrypted data Cmks2.

When the encrypted data Cmks2 is stored in the primary user terminal 4,the second secret-key Ks2 is stored in the terminal 4. However, when theencrypted data Cmks2 is not stored in the primary user terminal 4 but iscopied to the recording medium 11 or transferred to the secondary userterminal 5 via the communication network 2, the second secret-key Ks2 isdisused in order to disable subsequent utilization of the data in theprimary user terminal 4.

In this case, it is possible to set a limitation for repetitions ofcopying or transferring of the data so that the second secret-key Ks2 isnot disused within limited repetitions of copying and transferring ofthe data.

The primary user who is going to copy the data M to the externalrecording medium 11 or transmit the data M via the communication network2 must prepare the second secret-key Ks2 to encrypt the data M by thissecond secret-key Ks2 before copying or transmitting the data:

Cmks 2=E(Ks 2,M).

The uncrypted original copyright information Ic0 and primary-usercopyright information Ic1 are added to the encrypted data Cmks2.

Before using a database, a secondary user, similar to the primary user,prepares authentication data Au2 for authenticating the secondary user,a third public-key Kb3 a third private-key Kv3 corresponding to thethird public-key Kb3, a fourth public-key Kb4 and a fourth private-keyKv4 corresponding to the fourth public-key Kb4.

The secondary user who desires secondary utilization of the copied ortransferred encrypted data Cmks2 must designate the original data nameor number to the copyright management center 3 in order to requestsecondary utilization from the secondary user terminal 5 via thecommunication network 2. In this time, the secondary user also transfersthe third public-key Kb3 and the fourth public-key Kb4 as well as thesecondary user authentication data Au2 original copyright informationIc0 and primary user copyright information Ic1.

The copyright management center 3 receiving the secondary utilizationrequest from the secondary user confirms the secondary-userauthentication data Au2, and transfers confirmed secondary-userauthentication data Au2 to the tertiary copyright data 9 as secondaryuser information.

When the secondary copyright information Ic1 of the primary user istransferred, the secondary copyright information Ic1 is provided to thesecondary copyright data 8, and then, secondary copyright data 8recognizes the secondary copyright information Ic1 to be transferred tothe tertiary copyright data 9.

The secondary user selects permit key Kp2 corresponding to the form ofdata usage such as viewing, storing, copying, editing and transferringof data. Permit key Kp2 corresponding to the selected usage is sent tothe tertiary copyright data 9.

Because viewing and storing of data are the minimum required forms ofuse for the secondary user, these forms of use may be excluded from thechoices, offering only copying, editing and transferring as the choices.

The secondary copyright data 8 prepares a third secret-key Ks3. Theprepared third secret-key Ks3 is transferred to and stored in thetertiary copyright data 9.

As the result of the above transfer, the permit key Kp2 primary usercopyright information Ic1, primary user information Iu1, originalcopyright information Ic0, secondary user information Iu2 and thirdsecret-key Ks3 are stored in the tertiary copyright data 9. The permitkey Kp2 primary user copyright information Ic1, and primary userinformation Iu1 are used for copyright royalties distribution.

Hereafter similarly, permit key Kpn corresponding to n-order usage,copyright information for secondary exploitation right Icn-1 of(n-1)-order user, primary user information Iu1, original copyrightinformation Ic0, n-order user information Iun, and n-th secret-key Ksnare stored in n-order copyright data 10.

The permit key Kp2 primary user information Iu1, original copyrightinformation Ic0 and second secret-key Ks2 are read out of the secondarycopyright data 8. The original copyright information Ic0 is used forcopyright royalties distribution.

The read second secret-key Ks2 and third secret-key Ks3 are encrypted bythe third public-key Kb3 and fourth public-key Kb4 of the secondary userrespectively:

Cks 2 kb 3=E(Kb 3,Ks 2)

Cks 3 kb 4=E(Kb 4,Ks 3)

The copyright management program P is encrypted by the third secret-keyKs3:

Cpks 3=E(Ks 3 P).

The encrypted copyright management program Cpks3, encrypted secondsecret-key Cks2kb3 and encrypted third secret-key Cks3kb4 aretransferred to the secondary user terminal 5 via the communicationnetwork 2. In this case, charging is performed, if necessary.

The secondary user, receiving two encrypted secret-keys, Cks2kb3 andCksb3k4 and the encrypted copyright management program Cpks3 from thesecondary copyright data 8, and using the database utilization softwaredecrypts the encrypted second secret-key Cks2kb3 by the thirdprivate-key Kv3, and decrypts the encrypted third secret-key Cks3kb4 bythe fourth private-key Kv4 corresponding to the fourth public-key Kb4:

Ks 2=D(Kv 3,Cks 2 kb 3)

Ks 3=D(Kv 4,Cks 3 kb 4).

The encrypted copyright management program Cpks3 is decrypted by thedecrypted third secret-key Ks3:

P=D(Ks 3,Cpks 3).

Then, the encrypted data Cmks2 is decrypted for use by the decryptedsecond secret-key Ks2 using decrypted copyright management program P:

M=D(Ks 2,Cmks 2).

As described above, the third private-key Kv3 and the fourth private-keyKv4 are prepared by the secondary user but not opened to others.Therefore, even if a third party obtains the encrypted data Cmks2, it isimpossible to use the data by decrypting it.

Each user who uses the above-mentioned system must have previously beenentered in the database system, and when entered in the system, providedwith database software.

Because the software includes not only normal communication software,such as a data communication protocols but also a program for decryptinga copyright management program by a first crypt-key, protection isnecessary.

A first crypt-key K1, a second crypt-key K2 and a copyright managementprogram P are transferred to each user in order to use data M. Each userkeeps these keys and the program.

Further, the copyright information label, the user information, thepublic-key and private-key in the public-key cryptosystem and theprogram containing the algorithm for generating the secret-key arestored when needed.

For storing them, the simplest means to use is a flexible disk. However,the flexible disk is easy to lose or alter.

A hard disk drive is also subject to loss or alteration of data, thoughit is more stable than the flexible disk.

Recently, use of an IC card has spread in which an IC element is sealedin a card-like package. Particularly, standardization of a PC card witha microprocessor sealed inside has developed for PCMCIA cards and JEIDAcards.

The data copyright management apparatus proposed by the presentinventors in the prior Japanese Patent application No. 237673/1994 isdescribed in FIG. 2.

The data copyright management unit 15 is configured as a computer systemcomprising a microprocessor (CPU) 16, a local bus 17 of CPU 16, readonly memory (ROM) 18 connected to local bus 17, and write/read memory(RAM) 19, and wherein the local bus 17 is connected to system bus 22 ofthe microprocessor 21 of the user terminal 20.

Further, a communication unit (COMM) 23 which receives data from anexternal database and transfers data to the external database; a CD-ROMdrive (CDRD) 24 which reads data provided by CD-ROM; a flexible diskdrive (FDD) 25 which copies received or edited data to a flexible diskdrive to provide the outside with such data, and a hard disc drive (HDD)26 which stores data are connected to the system bus 22 in the userterminal 20.

As is typical, ROM and RAM or the like are connected to the system bus22 of the user terminal. However, this is not shown in the figure.

Fixed information, such as software and user data, for utilizing thedatabase is stored in ROM 18 of the data copyright management unit 15. Acrypt-key and the copyright management program provided from the keycontrol center or copyright management center are stored in RAM 19.

The process of decryption and re-encryption are performed by the datacopyright management unit 15, only the results of which are transferredto the user terminal 20 via the local bus 17 and the system bus 21 ofthe user terminal.

The data copyright management unit 15 is implemented as monolithic IC,hybrid IC, an expansion board, an IC card, or a PC card.

SUMMARY OF THE INVENTION

In the present application, apparatus for a data copyright managementsystem, resulting from the further implementation of the apparatus usedin the user terminal proposed in the prior Japanese patent applicationNo. 237673/1994, is proposed.

The apparatus for data copyright management in the present invention isattached to the user terminal, which comprises a central processingunit, central processing unit bus, read only semiconductor memory,electrically erasable programmable memory, and read/write memory.

The central processing unit, read only semiconductor memory,electrically erasable programmable memory, and read/write memory areconnected to the central processing unit bus. Also, the system bus of aunit which utilizes the data can be connected to it. A data copyrightmanagement system program, a crypt algorithm, and user information arestored in the read only semiconductor memory. A second private-key,permit key, second secret-key, and copyright information are stored inthe electrically erasable programmable memory. The first public-key,first private-key, second public-key, and first secret-key aretransferred to the read/write memory during operation of the unit. Ifthe copyright management program is provided from the outside, it isstored in the EEPROM. Otherwise, it is stored in ROM.

As embodiments of the data copyright management apparatus, monolithicIC, hybrid IC, a thin IC card with special terminal, a PC card, and aboard for insertion may be used.

In the data copyright management system described above as a priorinvention, while the obtained encrypted data is decrypted fordisplaying/editing, the obtained or edited data is re-encrypted tostore/copy/transfer, so that no unauthorized use of the data is allowed.

Accordingly, in the apparatus used in the data copyright managementsystem of the present invention, re-encryption of data, as well asdecryption of data should be performed concurrently. However, the datacopyright management apparatus described in the prior applications canperform only one process of either data decryption or datare-encryption.

Thus, in the present application, a data copyright management apparatusis proposed which, at the same time, can decrypt and re-encrypt thesupplied encrypted data to perform copyright management and control.

For this purpose, data which was encrypted and provided is decrypted andre-encrypted by adding at least one microprocessor, and preferably twomicroprocessors, in addition to the microprocessor that controls theentire user terminal therein. When one microprocessor is added, one ofthe two microprocessors will decrypt data and the other will re-encryptdata.

When two microprocessors are added, one of the added microprocessorswill decrypt data, another microprocessor will re-encrypt data, and thethird microprocessor of the user terminal will control the entireoperation.

Although the added microprocessors may be connected to the system bus ofthe microprocessor in the user terminal, this configuration may notallow a multiprocessor configuration to operate plural microprocessorsconcurrently. Therefore, in the present application, a data copyrightmanagement apparatus is implemented as a multiprocessor configurationutilizing SCSI bus or PCI bus.

Other than character data, digital data includes graphic data, computerprograms digital audio data, still picture data of the JPEG standard,and motion-picture data of the MPEG standard. While the dataapplications comprising these data forms are utilized by using variousapparatus, it is necessary that these apparatus also include the datacopyright management function.

Thus, in the present application, it is proposed that, as a form of use,these data copyright management apparatus and the data copyrightmanagement apparatus described in the prior application be incorporatedin various systems.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a block diagram of the data copyright management system of theprior invention.

FIG. 2 is a block diagram of the data copyright management apparatus ofthe prior invention.

FIG. 3 is a block diagram of the data copyright management apparatus ofa first embodiment of the present invention.

FIG. 4 is a specific block diagram of the data copyright managementapparatus of a first embodiment of the present invention.

FIG. 5 is a process flow chart of a data copyright management systemrelated to the present invention.

FIG. 6 is a block diagram of the data copyright management system of theprior invention.

FIG. 7 is a flow chart of a general edit process of digital data.

FIG. 8 is a flow chart of an encrypted data edit process of the presentinvention.

FIG. 9 is a block diagram of the data copyright management apparatus ofa second embodiment of the present invention.

FIG. 10 is a block diagram of the data copyright management apparatus ofa third embodiment of the present invention.

FIG. 11 is a block diagram of the data copyright management apparatus ofa fourth embodiment of the present invention.

FIG. 12 is a block diagram of the data copyright management apparatus ofa fifth embodiment of the present invention.

FIG. 13 is a block diagram of the data copyright management apparatus ofa sixth embodiment of the present invention.

FIG. 14 is a block diagram of the digital cash system as one example ofuse of the present invention.

FIG. 15 is a block diagram of the video conference system as one exampleof use of the present invention.

DETAILED DESCRIPTION

The detailed embodiments of the present invention are described belowwith reference to the drawings.

A first embodiment of the data copyright management apparatus related tothe present invention is shown in the block diagram of FIG. 3.

The data copyright management unit 30 includes electrically erasableprogrammable memory (EEPROM) 31 in addition to the components of thedata copyright management unit 15 described in the prior Japaneseapplication No. 237673/1994.

The data copyright management unit 30 is a computer system having CPU16, local bus 17 of CPU 16, ROM 18 connected to local bus 17, RAM 19,and EEPROM 31, wherein local bus 17 is connected to the system bus 22 ofthe microprocessor 21 in the user terminal 20.

Further, communication unit (COMM) 23 which receives data from externaldatabase and transfers data outside, CD-ROM drive (CDRD) 24 which readsdata provided by CD-ROM, a flexible disc drive (FDD) 25 which copiesdata received or edited in order to supply it to the outside, and harddisk drive (HDD) 26 which stores data are connected to the system bus 22of the user terminal 20.

ROM and RAM are connected to the system bus 22 of the user terminal.However, they are not shown in the figure.

Fixed information such as a data copyright management program, acryptography program based on a crypt algorithm, and user data arestored in ROM 18.

A crypt-key and copyright information are stored in EEPROM 31. Further,when the data copyright management program and cryptography program aresupplied from outside, such as from a database, they are stored inEEPROM 31, rather than in ROM 18.

The data copyright management unit 30 performs the process of decryptionor re-encryption, only the result of which is transferred to the userterminal 20 via local bus 17 and system bus 22.

The data copyright management unit 30 is implemented as a monolithic IC,a hybrid IC, an expansion board, an IC card, or a PC card.

Fixed data such as a data copyright management program, a cryptographyprogram based on a crypt algorithm, and user data are stored in ROM 18of the data copyright management unit 30 in the first embodiment.

Further, a decryption program, a re-encryption program, and a programfor generating secret-keys based on a known secret-key algorithm may bestored in ROM 18.

A crypt-key and copyright information are stored in EEPROM 31. Also,when the copyright management program and the encryption program aresupplied from the outside, such as from a database, they are stored inEEPROM 31, rather than ROM 18. Still, the EEPROM is not necessarilyrequired and may be omitted.

Either one of the first crypt-key or the second crypt-key supplied fromthe key control center or copyright management center, and the datacopyright management system program are stored in RAM 19 of the userterminal unit 20. However, information such as software and the userdata required by MPU 46 in the user terminal 20 are supplied to the userterminal 20 by the software, and stored in RAM of the user terminal 20.

The process of decryption and re-encryption are shared by MPU 46 of themain body of the user terminal 20 and CPU 16 of the data copyrightmanagement unit 30; one encrypts data and the other decrypts data, andonly the processed results of the data copyright management unit 30 aretransferred to the user terminal.

The specific internal structure of the data copyright management unit 30in FIG. 3 is shown in FIG. 4.

A microcomputer (CPU) 16, read only semiconductor memory (ROM) 18,write/read memory (RAM) 19, and electrically erasable programmablememory (EEPROM) 31 are enclosed in the data copyright management unit30, and are connected to microcomputer bus 17 of the microcomputer 16.The microcomputer bus 17 is further connected to system bus 22 of theuser terminal 20 main body.

The data copyright management system program, crypt algorithm, and theuser information are stored in the read only semiconductor memory 18.

The electrically erasable programmable memory 31 is divided internallyinto three areas. In the first area 35, the first public-key Kb1, thefirst private-key Kv1, the second public-key Kb2, and the secondprivate-key Kv2 are stored.

In the second area 36, the copyright management program P, the firstsecret-key Ks1 for use as a permit key in the primary use (such as aview permit, store permit, copy permit/, edit permit, or transferpermit), and the second secret key Ks2 for use as a permit key in thesecondary use (such as view permit, store permit, copy permit, editpermit or transfer permit) are stored. However, in some cases where thecopyright management program is not supplied from the outside, butpreset in the user side, the copyright management program is stored inthe read only memory 18, rather than in the second area 36 of theelectrically erasable programmable memory 31.

In the third area 37, an access control key and copyright informationsuch as the original copyright information and the secondary copyrightinformation are stored.

As in the case of the electrically erasable programmable memory 31, theinside of the write/read memory 19 is divided into three areas. In thefirst area 32, the first public-key Kb1, the first private-key Kv1, andthe second public-key Kb2 are stored during operation. In the secondarea 33, the first secret-key Ks1 for use as a permit key in the primaryutilization (such as a view permit, store permit, copy permit, editpermit, or transfer permit) is stored during operation. In the thirdarea 34, an access control key is stored during operation.

The user terminal attached with the data copyright management apparatusis reliable since it performs all of the processes for utilizing datawithin the data copyright management unit related to the presentinvention, so that only the results are transferred to the user terminalfor various utilization.

When picture data containing large amount of information istransferred/received, original data is transmitted after beingcompressed to reduce the amount of data. The compressed data is expandedafter reception to utilize it. In this case, the data copyright may bemanaged by encryption.

FIG. 5 is an example of data copyright management flow when encrypteddata of a digital picture is compressed in the JPEG or MPEG standard.The flow is divided into transmitting side flow and receiving side flowwith a transmit line in between. The receiving side flow is furtherdivided into display flow and storage flow.

The signal process in the transmitting side consists of a processpreparing a digital picture and a process processing the digital pictureprepared. In this process, if an original picture is the digital picture41, it proceeds to next process. If an original image is an analogpicture 40, digitizing process 42 is performed.

The digital picture is compressed (43) first by given standard such asJPEG or MPEG, then the compressed digital data is encrypted (44) usingthe first secret-key.

The picture data signal processed in the transmitting side istransmitted through transmission line 45 such as a satellitebroadcasting wave, terrestrial broadcasting wave, CATV wave, or publictelephone line/ISDN line. Further, recording media such as a digitalvideo tape, a digital video disk, or CD-ROM may be used as thetransmission line.

Thus, the picture data transmitted to the receiving side is decrypted(46) first using the first secret key, then the compressed picture datais expanded (47) to be displayed (49). When the display is a digitaldata display unit, it is directly displayed, however, when it is ananalog data display unit, it is converted to analog data 48.

When data is stored in hard disk, flexible disk, optical magnetic disk,writeable video disk or the like, it is stored after being re-encrypted(50) using the second secret key.

In redisplaying the picture data re-encrypted and stored, it isre-decrypted (52) using the second secret key and displayed (49). If thedisplay unit is a digital data display unit, it is directly displayed,however, if it is an analog data display unit, it is converted to analogdata (48).

For data compression/expansion means and the transmission path,appropriate ones compatible with the data are used.

FIG. 6 shows an example of the data copyright management systemdisclosed in the prior Japanese Patent Application No. 237673/1994. Thissystem uses the secret-key system as a cryptosystem.

In the case of this system, reference numeral 1 represents a database inwhich text data, binary data serving as a computer graphic display or acomputer program, digital audio data, and digital picture data arestored by being encrypted. Reference numeral 14 represents a spacesatellite such as a communications satellite or a broadcastingsatellite. Reference numeral 15 represents a data recorder such as aCD-ROM or a flexible disk. Reference numeral 2 represents acommunication network such as a public telephone line offered by acommunication enterprise or a CATV line offered by a cable televisionenterprise. Reference numeral 4 represents a primary user terminal.Reference numeral 16 represents a key control center for managing asecret-key, and reference numeral 17 represents a copyright managementcenter for managing a data copyright.

Reference numerals 5, 6, and 7 represent a secondary user terminal, atertiary user terminal, and n-order user terminal respectively.Reference numerals 11, 12 and 13 represent a secondary disk, tertiarydisk, and n-order disk serving as a recording medium such as a flexibledisk or CD-ROM respectively. The symbol “n” represents an optionalinteger. When “n” is larger than four, a corresponding user terminal anda corresponding disk are arranged between the tertiary user terminal 6and the n-order user terminal 7 and between the tertiary disk 12 and then-order disk 13 respectively.

In the above arrangement, the database 1, key control center 16,copyright management center 17, primary user terminal 4, secondary userterminal 5, tertiary user terminal 6, and n-order user terminal 7 areconnected to the communication network 2.

In FIG. 6, the path shown by a broken line is a path of encrypted data;a path shown by a solid line is a path of requests from each usertermina; and a path shown by a one-dot chain line is a path throughwhich authorization information corresponding to a utilization requestand a secret-key are transferred.

Each user who uses this system has been previously entered in thedatabase system. When the user is entered in the system, databaseutilization software is provided to the user. The database utilizationsoftware includes not only normal communication software such as a datacommunication protocol, but also a program for running a copyrightmanagement program.

Original data M0 of text data, binary data as a computer graphic displayor computer program, digital audio data, or digital picture data storedin the database 1 or data recording medium 15 is supplied via one-waycommunication to the primary user terminal 4 via the communicationnetwork 2, satellite 14 or recording medium 15. In this case, the datais encrypted with a first secret-key Ks1:

Cm 0 ks 1=E(Ks 1,M 0).

Even if data is provided with advertisement to be offered free ofcharge, encryption is necessary in order to protect the copyright.

It is disclosed in the Japanese Patent Application No. 64889/1994 thatthe data utilization includes not only displaying of data which is themost basic usage, but also storing, editing, copying, and transferringof the data. A use permit key is prepared which corresponds to one, orseveral forms of usage, and its management is executed by the copyrightmanagement program.

Moreover, it is described there that data is encrypted again by thecopyright management program for uses such as storing, copying, editingand transferring of the data other than displaying of the data anddisplaying for editing the data.

In other words, the data whose copyright is claimed is encrypted to bedistributed. Only when the data is displayed or displayed for editingthe data in a user terminal having a copyright treatment function, isthe data decrypted to a plaintext format.

This system disclosed in Japanese Patent Application No. 237673/1994uses the method described in the prior application No. 64889/1994.

A primary user who desires primary utilization of the supplied encrypteddata Cm0ks1 requests for primary utilization of the encrypted originaldata Cm0ks1 by designating the original data name or the original datanumber to the key control center 16 via the communication network 2 fromthe primary user terminal 4. In this case, the primary user must presentinformation Iu1 for the primary user to the key control center 16.

The key control center 16, receiving the primary utilization requestfrom the primary user terminal 4, transfers first secret-key Ks1 fordecrypting the encrypted original data Cm0ks1 obtained from the database1 by the primary user and second secret-key Ks2 for re-encrypting thedecrypted original data M0 or edited data M1 from the original data,together with a copyright management program P via the communicationnetwork 2 to the primary user terminal 4.

In the primary user terminal 4, receiving the first secret-key Ks1 as adecryption key and the second secret-key Ks2 as an encryption/decryptionkey, the encrypted original data Cm0ks1 is decrypted by the firstsecret-key Ks1 using the copyright management program P:

M 0=D(Ks 1,Cm 0 ks 1)

to use the decrypted original data M0 directly or data M1 as edited.

When the data M which is the original data M0 or edited data M1, isstored in a memory or a built-in hard disk drive of the primary userterminal 4, only the primary user can use the data. However, when thedata M is copied to the external recording medium 11, such as a flexibledisk, or transmitted to the secondary user terminal 5 via thecommunication network 2, a copyright problem due to secondaryutilization occurs.

When the original data M0 obtained by the primary user is directlycopied and supplied to a secondary user, the copyright of the primaryuser is not effected on the data M0 because the original data M0 is notmodified at all. However, when the primary user produces new data M1 byediting the obtained data M0 or by using means such as combination withother data, the copyright of the primary user, i.e., secondaryexploitation right occurring from secondarily utilizing original data,is effected on the data M1.

Similarly, when a secondary user produces new data M2 by editing theoriginal data M0 or edited data M1 obtained from the primary user, or bymeans such as combination with other data, the copyright of thesecondary user, i.e., secondary exploitation right of the secondary useris also effected.

In this system, to deal with the copyright problem, the data M isencrypted by the second secret-key Ks2 using the copyright managementprogram P when the data M is stored, copied, or transferred. Thereafter,in the primary user terminal 4, the data M is decrypted and encrypted bythe second secret-key Ks2:

Cmks 2=E(Ks 2,M)

M=D(Ks 2,Cmks 2).

It is free in principle that the primary user displays and edits data toobtain edited data. In this case, however, it is possible to limit therepetitions of the operation by the copyright management program.

When the data M is copied to the external recording medium 11 ortransmitted via the communication network 2, the first secret-key Ks1and the second secret-key Ks2 in the primary user terminal 4 are disusedby the copyright management program P. Therefore, when reusing the dataM, the primary user requests for utilization of the data M to the keycontrol center 16 to again obtain the second secret-key Ks2.

The fact that the user receives the regrant of the second secret-key Ks2represents secondary utilization of data in which the data M has beencopied to the external recording medium 11 or transferred to thesecondary user terminal 5 via the communication network 2. Therefore,this fact is entered in the copyright management center 17 from the keycontrol center 16, and subsequent secondary utilization becomespossible.

The data M is moved from the primary user terminal 4 to the secondaryuser terminal 5 by the external recording medium 11 or the communicationnetwork 2. When the data M is copied to the external recording medium 11or transmitted via the communication network 2, it is encrypted by thesecond secret-key Ks2.

When the data M is copied to the external recording medium 11 ortransmitted via the communication network 2, the first secret-key Ks1and the second secret-key Ks2 in the primary user terminal 4 aredisused. At this time, uncrypted primary user information Iu1 is addedto the encrypted data Cmks2 stored in the primary user terminal 4 andwhen the encrypted data Cmks2 is transferred to the secondary user, theprimary user information Iu1 is also transferred.

A secondary user who desires secondary utilization of the encrypted dataCmks2 copied or transmitted from the primary user must designate theoriginal data name or data number to the copyright management center 17via the communication network 2 by the secondary user terminal 5, andalso present the secondary user information Iu2 to the center 17 torequest for secondary utilization of the data Cmks2. In this time, thesecondary user further presents the uncrypted primary user informationIu1 added to the encrypted data Cmks2 in order to clarify therelationship with the primary user.

The copyright management center 17 confirms, in accordance with thepresented primary user information Iu1, that the primary user hasreceived a regrant of the second secret-key Ks2 for secondary-utilizingthe data, and then, transfers the second secret-key Ks2 serving as adecryption key and the third secret-key Ks3 serving as anencryption/decryption key to the secondary user terminal 5 via thecommunication network 2.

In the secondary user terminal 5 receiving the second secret-key Ks2 andthe third secret-key Ks3, the encrypted data Cmks2 is decrypted usingthe second secret-key Ks2 by the copyright management program P

M=D(Ks 2,Cmks 2)

and is secondarily utilized, e.g. displayed or edited.

In this system, the key control center 16 processes primary utilizationrequests and the copyright management center 17 processes secondaryutilization requests. While the data M supplied to a primary user isencrypted by the first secret-key Ks1, the data M supplied to asecondary user is encrypted by the second secret-key Ks2. Moreover, thefirst secret-key Ks1 and the second secret-key Ks2 are transferred tothe primary user as crypt keys from the key control center 16.

Therefore, if the secondary user, instead of the primary user, falselyrequests for primary utilization to the key control center 16, the firstsecret-key Ks1 for decryption and the second secret-key Ks2 forencryption/decryption are transferred to the secondary user. However,the secondary user cannot decrypt the encrypted data Cmks2 by using thefirst secret-key Ks1 transferred as a decryption key.

Therefore, it is impossible to falsely request for data utilization.Thus, not only the original copyright of data but also the copyright ofthe primary user on the data is protected.

When storing, copying, or transferring of the data M, other thandisplaying and displaying for editing is performed in the secondary userterminal 5, the data M is encrypted using the third secret-key Ks3 bythe copyright management program P and thereafter, the data is decryptedand encrypted by the third secret-key Ks3:

 Cmks 3=E(Ks 3,M)

M=D(Ks 3,Cmks 3).

It is free in principle that the secondary user displays and edits datato obtain the edited data M2. In this case, it is possible to limit therepetitions of the operation by the copyright management program P.

When the data M is copied to the external recording medium 12 ortransmitted via the communication network 2, the second secret-key Ks2and the third secret-key Ks3 in the secondary user terminal 5 aredisused by the copyright management program P. Therefore, when reusingthe data M, the secondary user requests for the utilization of the datato the copyright management center 17 to again obtain the thirdsecret-key Ks3.

The fact that the secondary user receives a regrant of the thirdsecret-key Ks3 represents secondary utilization of data in which thedata M has been copied to the external recording medium 12 ortransmitted to the tertiary user terminal 6 via the communicationnetwork 2. Therefore, this fact is entered in the copyright managementcenter 17 and allows subsequent data use.

The data M is moved from the secondary user terminal 5 to the tertiaryuser terminal 6 by the external recording medium 12 or by thecommunication network 2. When the data M is copied to the externalrecording medium 12 or transferred via the communication network 2; itis encrypted by the third secret-key Ks3.

When the data M is copied to the-external recording medium 12 ortransmitted to the tertiary user terminal 6 via the communicationnetwork 2, the second secret-key Ks2 and the third secret-key Ks3 in thesecondary user terminal 5 are disused. In this case, the uncryptedsecondary user information Iu2 is added to the encrypted data Cmks3stored in the secondary user terminal 5, and when the encrypted dataCmks3 is transferred to a tertiary user, the secondary user informationIu2 is also transferred.

In adding each user information to data, there are two cases: a case inwhich all information is added to data whenever it is copied ortransmitted; and another in which the history updated whenever the datais copied or transmitted is stored in the copyright management center.

A tertiary user who desires tertiary utilization of the encrypted dataCmks3 copied or transmitted from the secondary user must designate theoriginal data name or number to the copyright management center 17 froma tertiary user terminal 6 via the communication network 2, and alsopresent the tertiary user information Iu3 to request for tertiaryutilization of the data. At this time, the tertiary user furtherpresents the uncrypted secondary user information Iu2 added to theencrypted data Cmks3 in order to clarify the relationship with thesecondary user.

The copyright management center 17 confirms that the secondary user hasreceived a regrant of the third secret-key Ks3 for preparation oftertiary-utilizing the data, in accordance with the presented secondaryuser information Iu2, and then transfers the third secret-key Ks3serving as a decryption key and fourth secret-key Ks4 serving as anencryption/decryption key to the tertiary user terminal 6 via thecommunication network 2.

In the tertiary user terminal 6 receiving the third secret-key Ks3 andthe fourth secret-key Ks4, the encrypted data Cmks3 is decrypted usingthe third secret-key Ks3 by the copyright management program P

M=D(Ks 3,Cmks 3)

and is tertiarily utilized, e.g. displayed or edited.

In this system, the data M supplied to the primary user is encrypted bythe first secret-key Ks1 and the data M supplied to the secondary useris encrypted by the second secret-key Ks2, and the data M supplied tothe tertiary user is encrypted by the third secret-key Ks3.

Therefore, if the tertiary user, instead of the primary user, falselyrequests for primary utilization from the key control center 16, thefirst secret-key Ks1 for decryption and the second secret-key Ks2 forencryption/decryption are transferred to the tertiary user. However, itis impossible to decrypt the encrypted data Cmks3 by the firstsecret-key Ks1 transferred as a decryption key. Moreover, if thetertiary user, instead of the secondary user, falsely requests forsecondary utilization to the copyright management center 17, the secondsecret-key Ks2 and the third secret-key Ks3 are transferred to thetertiary user as a decryption key and an encryption/decryption keyrespectively. However, it is impossible to decrypt the encrypted dataCmKs3 by the second secret-key Ks2 transferred as a decryption key.

Therefore, it is impossible to falsely request for data utilization. Asa result, not only the original copyright of the data, but also thecopyrights of the primary and secondary users on the data are protected.The same procedure is applied to quaternary and subsequent utilization.

In the above described system, the database 1, key control center 16,and copyright management center 17 are separately arranged. However, itis not always necessary to arrange them separately. It is also possibleto set all of or two of them integrally.

Moreover, it is also possible for the primary user to request for aregrant of the secondary secret-key not from the key control center 16but from the copyright management center 17.

In FIGS. 7(a) and 7(b), signal process flow in a data editing method ofdigital video or digital audio is shown. An edit flow generallyprocessed is shown in 7(a). An edit flow which can avoid deteriorationof signals is shown in 12(b).

In the edit flow shown in 7(a), signals supplied as digital signals 61are converted to analog signals (62). The analog signals are then editedwhile being displayed (64), and the edited analog signals arere-digitized (65) to be stored, copied, and transferred (66).

Though this process may be simple, it can not avoid the deterioration ofsignals since the signal is edited in analog form and re-digitized aftercompletion of editing.

In the edit flow shown in 7(b), digital signals 61 are converted toanalog signals (62) to be displayed. While the analog signals (62) areused in editing (63), the analog signals are used only for displaying(64) rather than for storing, copying, transferring.

Signals for storage, copy, and transfer are edited (67), copied, andtransferred (66) in the form of digital signals 61 correspond to signalsdisplayed in analog.

In the case of this edit flow, there is no deterioration of signalssince digital signals which are stored, copied, and transferred arenever converted to analog signals.

FIGS. 8(a) and 8(b) illustrate flow examples when editing encrypted datato which a signal process in data editing method of digital video ordigital audio shown in FIGS. 7(a) and 7(b) is applied. FIG. 8(a) shows asimplified signal processing flow and FIG. 8(b) shows a signalprocessing flow which allows sufficient copyright management.

In the signal processing flow shown in (a), the original data (71)Cm0ks1, encrypted using the first secret-key Ks1 and supplied, isinitially decrypted (72) using the first secret key Ks1:

M 0=D(Ks 1 Cm 0 Ks 1),

and the decrypted data M0 is then edited (73) while being displayed(74). The data M1 completed editing is re-encrypted (75) using thesecond secret key Ks2:

Cm 1 ks 2=E(Ks 2 M 1)

and stored, copied, and transferred (76).

Though the process may be simple, copyright can not be properly managedsince there is a possibility that the decrypted data might be stored,copied, or transferred due to the data editing process in decryptedform.

On the other hand, in the signal processing flow shown in 8(b), theoriginal data (71) Cm0ks1, encrypted using the first secret key Ks1 isdecrypted (72) using the first secret-key Ks1:

M 0=D(Ks 1,Cm 0 ks 1)

and the decrypted data M0 is displayed (74).

Meanwhile, the encrypted data Cm0ks1 is edited (73), lead by thedecrypted data M0, and the original data M0 for storage or the editeddata M1 are re-encrypted using the second secret-key:

Cm 0 ks 2=E(Ks 2,M 0)

Cm 1 ks 2=E(Ks 2,M 1)

and the encrypted data Cm0ks2 or Cm1ks2 is stored, copied, andtransferred (76).

Without being decrypted corresponding to the decrypted and displayeddata, it is edited (77) in the encrypted form, and the edition programand the data still encrypted are used for store, copy, transfer (76).

In this signal processing flow, the decrypted data are never stored,copied, or transferred since the data for storing, copying, transferringremains encrypted.

In the data copyright management system which utilizes the datacopyright management apparatus of the present invention, when data isdecrypted for use when the obtained encrypted data are displayed/edited,data copyright is managed by encrypting data when obtained or editeddata is stored/copied/transferred.

However, the data copyright management unit 15 of the prior inventionshown in FIG. 2 and the data copyright management unit 30 of the presentinvention described in FIG. 3 can perform only one process of decryptionof encrypted data or encryption of decrypted data. When decrypted oredited data is stored/copied/transferred, therefore, it is necessary tostore data in the user terminal or RAM of the data copyright managementapparatus to re-encrypt the stored data afterwards. Thus, there is apossibility that decrypted or edited data might be lost due to accidentor misoperation. This also limits the volume of data that can beprocessed.

With the exception of some high-class MPU, general MPU used in personalcomputers does not take into account the multiprocessor configurationwhich allows concurrent operation of plural microcomputers. Therefore,plural operations can not be performed at the same time, althoughaccessory units are connected to the system bus of the personalcomputer.

Accordingly, to connect the data copyright management unit 15 shown inFIG. 2 or the data copyright management unit 30 shown in FIG. 3 to thesystem bus 22 of the user terminal 20 does not provides multiprocessorfunction that enables concurrent operation of MPU 21 or 46 and CPU 16,and the processes of decryption of encrypted data and re-encryption ofdecrypted data are performed alternately, not concurrently. Thus, alarge amount of data can not be processed since the data to be encryptedand decrypted is limited by the capacity of RAM. Further, it isimpossible to increase the processing speed, even if the amount of datais not large.

On the other hand, in the data copyright management system described asthe prior application, encrypted data that is obtained is decrypted touse for displaying or editing, and when the obtained or edited data isstored, copied, or transferred, it is re-encrypted to preventunauthorized use of the data. Therefore, it is desirable that theapparatus in the data copyright management system of the presentinvention perform not only decryption but also re-encryption of data atthe same time.

Recently, a PCI (Peripheral Component Interconnect) bus has attractedattention as a means for implementing a multiprocessor configuration oftypical personal computer.

The PCI bus is a bus for external connection connected to a system busof a personal computer via a PCI bridge. The PCI bus allowsimplementation of a multiprocessor configuration.

FIG. 9 shows another embodiment of this invention, which is aconfiguration of data copyright management apparatus using a PCI bus andthe same configuration of data copyright management unit 15 as shown inFIG. 3, that is, a computer configuration having a CPU 16, a local bus17 for the CPU 16, and ROM 18, RAM 19, and EEPROM 31 connected to thelocal bus 17.

In a user terminal 20, a PCI bus 81 is connected to a system bus 22 fora microprocessor 21 via a PCI bridge 82 and the local bus 17 for the CPU16 of a data copyright management apparatus 80 is connected to the PCIbus 81. Also connected to the system bus 22 of the user terminal 20 area communications device (COMM) 23 which receives data from externaldatabases and transfers data to the external of the terminal, a CD-ROMdrive (CDRD) 24 which reads data supplied on CD-ROM, a flexible diskdrive (FDD) 25 which copies received or edited data to supply to theexternal of terminal, and hard disk drive (HDD) 26 used for storingdata. COMM 23, CDRD 24, FDD 25, and HDD 26 may also be connected to thePCI bus 81. While ROM, RAM etc., of course, are connected to the systembus 22 of the user terminal, these are not shown in FIG. 9.

Configurations and operations of other parts are the same as theembodiment shown in FIG. 3, and further explanation of them will beomitted.

A decryption task is performed by the MPU 21 of the user terminal 20 andan encryption task is performed by the CPU 16 of the data copyrightmanagement apparatus 80 at the same time, and vice versa. Since theconfiguration of the MPU21 and CPU 16 in this embodiment is amultiprocessor configuration which performs parallel processing with aPCI bus, high processing speed can be achieved.

Other typical means for attaching external devices to a personalcomputer include SCSI (Small Computer System Interface), which is usedfor the connection of an external storage medium such as hard diskdrives and CD-ROM drives.

Up to eight devices, including the personal computer itself to which theSCSI is attached, can be connected to the SCSI, and a plurality ofcomputers may be included in the eight devices. Each of these computerscan play an equivalent role; in other words, the SCSI functions not onlyas an interface but also as a multiprocessor bus.

Taking advantage of this function of the SCSI, yet another embodimentconnects a data copyright management apparatus 85 to the system bus 22of a user terminal 20 via SCSI 86 (hereinafter called the “SCSI bus,”for clear understanding) instead of the PCI bus 81 in the embodimentshown in FIG. 9.

FIG. 10 shows a configuration block diagram of a data copyrightmanagement apparatus of this embodiment which uses the SCSI busaccording to the present invention.

In FIG. 10, the configuration of the data copyright management apparatus85 is the same as the data copyright management apparatus shown in FIG.3, that is, the apparatus has a CPU 16, a local bus 17 for the CPU 16,and ROM 18, RAM 19, and EEPROM 31 connected to the local bus 17.

On the other hand, an SCSI bus 86, which is controlled by an SCSIcontroller (SCSICONT) 87, is connected to a system bus 22 for amicroprocessor 21 of a user terminal 20, and the local bus 17 for theCPU 16 of a data copyright management apparatus 85 is connected to thisSCSI bus 86.

Also connected to the system bus 22 of the user terminal 20 are acommunications device (COMM) 23 which receives data from externaldatabases and transfers data to the external of the terminal, a CD-ROMdrive (CDRD) 24 which reads data supplied on CD-ROM, a flexible diskdrive (FDD) 25 which copies received or edited data to supply to theexternal of terminal, and hard disk drive (HDD) 26 used for storingdata. COMM 23, CDRD 24, FDD 25, and HDD 26 may also be connected to theSCSI bus 86. While ROM, RAM etc., of course, are connected to the systembus 22 of the user terminal, these are not shown in FIG. 10.

Configurations and operations of other parts are the same as theembodiment shown in FIG. 3, and further explanation of them will beomitted.

A decryption task is performed by the MPU 21 of the user terminal 20 anda encryption task is performed by the CPU 16 of the data copyrightmanagement apparatus 85 at the same time, and vice versa. Since theconfiguration of the MPU 21 and CPU 16 in this embodiment is amultiprocessor configuration which performs parallel processing with anSISI bus 86, high processing speed can be achieved.

Other means for implementing a multiprocessor configuration, such as SCI(Scaleable Coherent Interface), may be used, and, if possible, themicroprocessors may be connected with each other without using a bus.

Data to be managed by the data copyright management apparatus of thepresent invention includes, in addition to text data, graphic data,computer programs, digital audio data, JPEG-based still picture data,and MPEG-based moving picture data.

The above-mentioned multiprocessor configuration of the data copyrightmanagement apparatus 80 of the embodiment shown in FIG. 9 and the datacopyright management apparatus 85 of the embodiment shown in FIG. 10 isimplemented by connecting the apparatus to the system bus 22 of themicroprocessor 21 in the user terminal 20 via a PCI bus or a SCSI bus.In such multiprocessor configuration, the MPU 21 of the user terminal 20must also control the overall system. For relatively slow and small datasuch as text data and graphic data, data copyright management withencryption and re-encryption can be performed by the multiprocessorconfiguration using the MPU 21 and CPU 16, for JPEG-still-picture-basedmoving picture data and MPEG1 or MPEG2-based moving picture data.However, data copyright management by such configuration is considerablydifficult to perform because a large amount of data must be processedquickly.

To deal with this problem, a multiprocessor system is configured byconnecting a first data copyright management apparatus 80 and a seconddata copyright management apparatus 90 to a PCI bus 81 in the embodimentshown in FIG. 11.

The configuration of the second data copyright management apparatus 90is the same as that of the first data copyright management apparatus 80;that is, the apparatus comprises a CPU 91, a local bus 94 for the CPU91, and ROM 92, RAM 93, and EEPROM 95 connected to the local bus 94.

In this embodiment, the first data copyright management apparatus 80decrypts encrypted data and the second data copyright managementapparatus 90 re-encrypts decrypted data.

Fixed information, such as software for utilizing databases and userdata, are stored in the ROM 18 of the first data copyright managementapparatus 80 decrypting encrypted data. A first crypt-key and datacopyright management system program supplied by a key control center orcopyright management center are stored in the RAM 19.

Similarly, fixed information, such as software for utilizing databasesand user data, are stored in the ROM 92 of the second data copyrightmanagement apparatus 90 re-encrypting decrypted data, and a secondcrypt-key and data copyright management system program supplied by a keycontrol center or copyright management center are stored in the RAM 93.

In this multiprocessor configuration, SCSI or SCI may be used, and, ifpossible, the microprocessors may be connected to each other withoutusing a bus.

In the prior application shown in FIG. 2 and in the embodiment of thepresent invention described with reference to FIG. 3, the communicationsdevice (COMM) 23, to which encrypted data is supplied, and the CD-ROMdrive (CDRD) 24 are connected to the system bus of the user terminal 20.To decrypt encrypted data, therefore, the encrypted data must betransmitted by way of the system bus of the user terminal 20 and thelocal bus of the data copyright management apparatus, and consequently,the processing speed can be slowed. This is true for a configuration inwhich those attached devices are connected to a PCI bus or SCSI bus.

In another embodiment of the present invention shown in FIG. 12, acommunications device 23 to which encrypted data is supplied and aCD-ROM drive 24 are connected to a local bus 17 of a data copyrightmanagement apparatus 97 for decryption, to prevent processing speed frombeing slowed.

The data copyright management apparatus 97 of the embodiment shown inFIG. 12 is a data copyright management apparatus for decryption and itsconfiguration is essentially the same as that of the data copyrightmanagement apparatus 30 of the embodiment shown in FIG. 3; that is, thecomputer system has a CPU 16, a local bus 17 for CPU 16, and ROM 18, RAM19 and EEPROM 31 connected to the local bus 17, and a communicationdevice COMM 23 and a CD-ROM drive CDRD 24 are connected to the local bus17.

Fixed information, such as a copyright management program, acryptography program based on a crypt algorithm, and user data, arestored in the ROM 18.

Copyright information is stored in the EEPROM 31. If the copyrightmanagement program and cryptography program are supplied externally,such as from databases, those programs are stored in the EEPROM 31,rather than in the ROM 18.

A crypt-key for decryption and a data copyright management systemprogram supplied from a key control center or copyright managementcenter are stored in the RAM 19.

Encrypted data supplied from the COMM 23 or CDRD 24 is decrypted by thedata copyright management apparatus 97 and transferred to a userterminal 95.

While the above-mentioned data copyright management apparatus 80 and 90of the embodiment (shown in FIG. 11) are described as being configuredseparately, these apparatus, of course, can be configured as a unit.

FIG. 13 shows another embodiment of a data copyright managementapparatus which is extended from the data copyright management apparatus97 described with reference to FIG. 12.

In the prior application shown in FIG. 2 and the embodiment describedwith reference to FIG. 3, the storage medium, such as HDD 26, forstoring re-encrypted data, are connected to the system bus 22 of theuser terminal 20. To store re-encrypted data, therefore, the encrypteddata must be transmitted by way of the system bus 22 of the userterminal 20 and the local bus 17 of the data copyright management unit15 or data copyright management unit 30, and consequently, processingspeed can be slowed. This is true for a configuration in which thoseattached devices are connected to a PCI bus or SCSI bus.

In the data copyright management apparatus 100 of the embodiment shownin FIG. 13, in addition to the communications device COMM 23 and theCD-ROM drive CDRD 24 connected to the local bus 17 in the data copyrightmanagement apparatus 97 for decryption in the embodiment shown in FIG.12, storage devices such as HDD 26 for storing re-encrypted data areconnected to the local bus 94 of the data copyright management apparatus101 for re-encryption.

The configuration of the data copyright management apparatus 101 forre-encryption in the embodiment shown in FIG. 13 is essentially the sameas that of the data copyright management unit 30 shown in FIG. 3; thatis, the computer system has a CPU 91, a local bus 94 for the CPU 91, andROM 92, RAM 93 and EEPROM 95 connected to the local bus 94, and HDD 26is connected to the local bus 94.

Fixed information, such as a copyright management program, acryptography program based on a crypt algorithm, and user data, arestored in the ROM 92.

Copyright information is stored in the EEPROM 95. If the copyrightmanagement program and cryptography program are supplied from theexternal such as databases, those programs are stored in the EEPROM 95rather than the ROM 92. A crypt-key for re-encryption and a datacopyright management system program supplied from a key control centeror copyright management center are stored in the RAM 93. Datare-encrypted by the copyright management apparatus 101 for re-encryptionis stored in HDD 26.

While the above-mentioned data copyright management apparatus 100 and101 of the embodiment shown in FIG. 13 are described as being configuredseparately, these apparatus, of course, can be configured as a unit.

Digital data includes, in addition to text data, graphic data, computerprograms, digital sound data, JPEG-based still picture data, andMPEG-based moving picture data.

A typical user terminal which utilizes copyrighted data is a computerapparatus such as a personal computer. Other apparatus which utilizesuch data are receivers such as television sets, set-top boxes used withthose receivers, digital recording apparatus such as video taperecorders, digital video disk recorders, digital audio tapes (DAT) whichstore digital data, and personal digital assistants (PDA).

The data copyright management apparatus shown in FIG. 2 which isconfigured as an expansion board, IC card, or PC card and described inthe prior patent application No. 237673/1994 or the data copyrightmanagement apparatus shown in FIG. 6 may be used by attaching it to auser terminal which is a computer, receiver, set-top box, digitalrecording medium, or PDA. However, it is desirable that a data copyrightmanagement apparatus is factory-installed in the user terminal toeliminate labor and possible failure arising from the attachment of theapparatus.

To accomplish this, in each embodiment of the present invention, a datacopyright management apparatus is implemented in the form of amonolithic IC, hybrid IC, or built-in subboard and is incorporated in auser terminal such as computer apparatus or personal computers, orreceivers such as television sets, set-top boxes used with thosereceivers, digital recording medium such as digital video taperecorders, digital video disk recorders, and digital audio tape (DAT)which store digital signals, or personal digital assistants (PDA).

Further, the apparatus for managing data copyright described above canbe applied not only to the data utilization but also to the handling ofthe digital cash and video conference systems.

The digital cash system which has been proposed so far is based on asecret-key cryptosystem. The encrypted digital cash data is transferredfrom a bank account or a cash service of a credit company, and is storedin the IC card so that a terminal device for input/output is used tomake a payment. The digital cash system which uses this IC card as anelectronic cash-box can be used at any place such as shops or the likeas long as the input/output terminal is installed. However, the systemcannot be used at places such as homes or the like where no input/outputterminal is installed.

Since the digital cash is encrypted data, any device can be used as theelectronic cash-box which stores digital cash data, in addition to theIC card, as long as the device can store encrypted data and transmit thedata to the party to which the payment is made. As a terminal which canbe specifically used as the electronic cash-box, there are personalcomputers, intelligent television sets, portable telephone sets such asa personal information terminal, personal handy phone system (PHS),intelligent telephone sets, and PC cards or the like which have aninput/output function.

Trades in which such terminals are used as an electronic cash-box for adigital cash can be actualized by replacing, in the configuration of thedata copyright management system, the database with a customer's bank, afirst user terminal with a customer, the second user terminal with aretailer, the copyright control center with a retailer's bank, and athird user terminal with a wholesaler or a maker.

An example of the trading system will i be explained in FIG. 14 in whichthe digital cash is transferred via a communication network.

The example uses the configuration of the data copyright managementsystem shown in FIG. 1. In FIG. 14, reference numeral 111 represents acustomer, reference numeral 112 a bank of the customer 111, referencenumeral 113 a retail shop, reference numeral 114 a bank of the retailshop 113, reference numeral 115 a maker, reference numeral 116 a bank ofthe maker 115, reference numeral 2 a communication network such as apublic line provided by a communication enterprise or CATV line providedby a cable television enterprise. Customer 111, the customer's bank 112,the retail shop 113, the retail shop's bank 114, the maker 115, themaker's bank 116 can be mutually connected with the communicationnetwork 2. In this system, the customer 111 can use a credit companyoffering cashing service other than banks and he can also interpose anappropriate number of wholesalers between the retail shop and the maker.

In addition, reference numerals 117 and 118 are either IC cards or PCcards in which digital cash data is stored. The cards are used when thecommunication network is not used.

Incidentally, in FIG. 14, the broken line represents a path of encrypteddigital cash data, the solid line represents a path of requests from thecustomer, the retail shop or the maker, and the one-dot chain linerepresents a path of the secret-key from each bank.

In this example, first secret-key prepared by the customer's bank 112,the second secret-key generated by the customer, the third secret-keygenerated by the retail shop, and the fourth secret-key prepared by themaker are used as crypt keys.

Further, while the customer's bank 112, the retail shop's bank 114, andthe maker's bank 116 are explained as separate entities, these can beconsidered as a financial system as a whole.

Digital cash management program P for encrypting and decrypting thedigital cash data is preliminarily distributed to the customer 111 andis stored in the user terminal. Further, it is possible to transfer thedigital cash management program P together with data every time a tradewith the bank is executed. Further, it is desirable to install thecommon digital cash management program P in all banks.

The customer 111 uses the user terminal to designate the amount of moneyvia the communication network 2 to request drawing out from the accountof the customer's bank 112 to the bank. At this time, the terminalpresents customer information Ic of the customer 111.

The customer's bank 112 which receives the customer's request of drawingout from the account selects or generates the first secret-key Ks1 sothat the digital cash data MO of the amount is encrypted by the firstsecret-key Ks1:

CmOks 1=E(Ks 1=MO)

and the encrypted digital cash data CmOks1 and the first secret-key Ks1for a decrypting key are transferred to the customer 111, and thecustomer information Ic and the first secret-key Ks1 are stored.

In this case, the first secret-key Ks1 can be selected from what ispreliminarily prepared by the customer's bank 112, and also may begenerated by presentation of the customer information Ic at the time ofdrawing by the customer using the digital cash management program P onthe basis of the customer information Ic:

Ks 1=P(Ic).

Through this means, the first secret-key Ks1 can be private for thecustomer 111. At the same time, it is not necessary to transfer thefirst secret-key Ks1 to the customer 111 so that the safety of thesystem can be heightened.

Further, the first secret-key Ks1 can be generated on the basis of thebank information Ibs of the customer's bank 112 or on the basis of thebank information Ibs and the key generation data.

The customer 111 to which the encrypted digital cash data CmOks1 and thefirst secret-key Ks1 are transferred generates second secret-key Ks2according to any one or both of the customer information Ic and thefirst secret-key Ks1 using the digital cash management program P, forexample:

Ks 2=P(Ic)

and the generated second secret-key Ks2 is stored in the user terminal.

Further, the customer 111 uses the first secret-key Ks1 to decrypt theencrypted digital cash data CmOks1 with the digital cash managementprogram P:

MO=D(Ks 1,CmOks 1)

and the content is confirmed. When the decrypted digital cash data MOwhose content is confirmed is stored in the user terminal as a cash-box,it is encrypted by the generated second secret-key Ks2 using the digitalcash management program P:

CmOKs 2=E(Ks 2,MO).

The first secret-key Ks1 is not used at this time.

The customer 111 who wishes to buy an article from the retail shop 113decrypts the encrypted digital cash data CmOks2 which is stored in theuser terminal as a cash-box by the digital cash management program Pusing the second secret-key Ks2:

MO=D(Ks 2,CmOks 2)

and the digital cash data M1 which corresponds to the necessary amountof money is encrypted by the second secret-key ks2 using the digitalcash management program P:

 Cm 1 ks 2=E(Ks 2,M 1)

and then payment is made by transmitting the encrypted digital cash dataCm1ks2 to the user terminal as a cash-box of retail shop 113 viacommunication network 2. At this time, the customer information Ic isalso transmitted to the user terminal of retail shop 113.

Further, the residual amount digital cash data M2 is encrypted by thesecond secret-key Ks2 using the digital cash management program P:

Cm 2 ks 2=E(Ks 2,M 2)

and stored in the user terminal of customer 111.

The retail shop 113 to which the encrypted digital cash data Cm1ks2 andthe customer information Ic are transferred stores the transferredencrypted digital cash data Cm1ks2 and customer information Ic in theuser terminal, and presents the customer information Ic to the retailshop's bank 114 via the communication network 2 for confirming thecontent to request the transmission of the second secret-key Ks2 fordescription.

The retail shop's bank 114 which is requested by the retail shop 113 totransmit the second secret-key Ks2 transmits the request of thetransmission of the second secret-key Ks2 and the customer informationIc to the customer's bank 112.

The customer's bank 112 which is requested to transmit the secondsecret-key Ks2 from the retail shop's bank 114 generates the secondsecret-key Ks2 according to the customer information Ic by the digitalcash management program P in the case where the second secret-key Ks2 isbased only on the customer information Ic, or generates the secondsecret-key Ks2 according to the customer information Ic and the firstsecret-key Ks1 by the digital cash management program P in the casewhere the second secret-key Ks2 is based on the customer information Icand the first secret-key Ks1, and transmits the generated secondsecret-key Ks2 to the retail shop's bank 114.

The retail shop's bank 114 to which the second secret-key Ks2 istransmitted from the customer's bank 112 transmits the second secret-keyKs2 to the retail shop 113 via the communication network 2.

The retail shop 113 to which the second secret-key Ks2 is transferreddecrypts the encrypted digital cash data Cm1ks2 by the second secret-keyKs2 using the digital cash management program P:

M 1=D(Ks 2,Cm 1,ks 2)

and after confirming the amount of money, forwards the article to thecustomer 111.

Incidentally, in this case, the retail shop 111 can directly request thetransfer of the second secret-key Ks2 to the customer's bank 112 insteadof the retail shop's bank 114.

In case where the digital cash received by the retail shop 113 isdeposited in the account of the retail shop's bank 114, the customerinformation Ic is transferred to the retail shop's bank 114 togetherwith the encrypted digital cash data Cm1ks2 via the communicationnetwork 2.

The retail shop's bank 114 to which the encrypted digital cash dataCm1ks2 and the customer information Ic are transferred requests thetransfer of the second secret-key Ks2 to the customer's bank 112 bytransmitting the customer information Ic.

The customer's bank 112, which is requested to transfer the secondsecret-key Ks2 from the retail shop's bank 114, generates the secondsecret-key Ks2 according to the customer's information Ic by the digitalcash management program P when the second secret-key Ks2 is based onlyon the customer's information Ic, or generates the second secret-key Ks2according to the customer's information Ic and the first secret-key Ks1by the digital cash management program P when the second secret-key Ks2is based on the customer's information Ic and the first secret-key Ks1,then the generated second secret-key Ks2 is transferred to the retailshop's bank 114.

The retail shop's bank 114, to which the second secret-key Ks2 istransferred from the customer's bank 112, decrypts the encrypted digitalcash data Cm1ks2 by the second secret-key Ks2 using the digital cashmanagement program P:

M 1=D(Ks 2,Cm 1 ks 2)

and the decrypted digital cash data M1 is deposited in the bank accountof the retail shop's bank 114.

In the general trade system, the retail shop 113 stocks products fromthe maker 115 or from the wholesaler which intervenes between the retailshop 113 and the maker 115. Then the retail shop 113 sells the productsto the customer 111. Consequently, a trading form is present between thecustomer 111 and the retail shop 113 just as between the retail shop 113and the maker 115.

The handling of the digital cash between the retail shop 113 and themaker 115 is not basically different from the handling of the digitalcash which is carried out between the customer 111 and the retail shop113. Therefore, the explanation there will be omitted for the sake ofclarity.

In this digital cash system, the digital cash is handled through banks.As information such as the processed amount of the digital cash, date,and the secret-key demanding party information with respect to thehandling of the digital cash is stored in the customer's bank, theresidual amount of digital cash and usage history, can be grasped.

Even in the case where the user terminal (which is an electroniccash-box storing the digital cash data) cannot be used owing to the lossor the breakage, it is possible to reissue the digital cash on the basisof the residual amount, and usage history kept in the customer's bank.

It is desirable to add a digital signature to the digital cash data toheighten the security of the digital cash.

In this example, digital cash is added by the customer's informationwhich may be accompanied by digital signature. Therefore, the digitalcash in the example can also have a function of a settlement system forchecques drawn by customers.

Also, this system is applicable to various systems in internationaltrade such as payment settlement of import/export by a negotiation by adraft using executed documents such as a letter of credit and a bill oflading.

In a video conference system, a television picture has been added to theconventional voice telephone set. Recently, the video conference systemhas advanced to the point where a computer system is incorporated intothe video conference system so that the quality of the voice and thepicture are improved, and data can be handled at the same time as thevoice and the picture.

Under these circumstances, security against the violation of the user'sprivacy and the data leakage due to eavesdropping by persons other thanthe participants of the conference are protected by the cryptosystemusing a secret-key.

However, since the conference content obtained by the participantsthemselves are decrypted, in the case where participants themselvesstore the content of the conference and sometimes edit the content, andfurther, use for secondary usage such as distribution to the personsother than the participants of the conference, the privacy of otherparticipants of the video conference and data security remainsunprotected.

In particular, advancements in the compression technology of thetransmission data and increases in the volume of the data storage mediummeans that soon it will be possible to copy all of the content of thevideo conference to the data storage medium, or to transmit it via anetwork.

In view of the circumstances, the example is intended, when videoconference participants perform secondary use, to secure the privacy ofother participants and data security by using the aforementionedconfiguration of the data copyright management system.

This video conference data management system can be actualized, forexample, by replacing the database in the data copyright managementsystem configuration shown in FIG. 1 with a participant of the videoconference, the first user terminal with another participant of thevideo conference, and the second user terminal with a non-participant ofthe video conference.

An example will be explained by using FIG. 15. Referring to FIG. 15,reference numeral 121 represents a participant as a host of the videoconference, reference numeral 122 a participant of the video conferenceas a guest, reference numeral 123 a non-participant of the videoconference as a user, reference numeral 124 a non-participant of thevideo conference as another user, reference numeral 2 a communicationnetwork such as a public telephone line provided by the communicationenterprise and a CA television line provided by the cable televisionenterprise or the like. The participant 121 of the video conference isconnected to the participant 122 of the video conference via thecommunication network 2. Further, the participant 122 of the videoconference can be connected to the non-participant 123 of the videoconference, and the non-participant 123 of the video conference to thenon-participant 124 of the video conference, via the communicationnetwork 2. Reference numerals 125 and 126 represent a data recordingmedium.

Referring to FIG. 15, the broken line represents a path of the encryptedvideo conference content, the solid line represents a path requestingthe crypt key from the non-participants of the video conference 123 and124 to the participant of the television conference 121, and the one-dotchain line represents a path of crypt keys from the participant of thevideo conference 121 to the participant of the video conference 122 andthe non-participants of the video conference 123 and 124.

In this example, a video conference data management system is describedhere protecting only the data security and privacy of video conferenceparticipant 121 to simplify the explanation. It is of course alsopossible to protect for data security and privacy of video conferenceparticipant 122.

A video conference data management program P for encryption/decryptionof the video conference data of the participant 121 including audio andpicture is previously distributed to the video conference participant122 and the video conference non-participants 123 and 124, and is storedin each terminal. This video conference data management program P may betransferred whenever a crypt-key is transferred.

In this example, further, a first secret-key prepared by the videoconference participant 121, a second secret-key prepared by the videoconference participant 122, a third secret-key prepared by the videoconference non-participant 123 and subsequent secret-keys preparedsimilarly are used as a crypt key.

The video conference participant 121 and the video conferenceparticipant 122 perform the video conference by transmitting audio,picture and data (referred to as video conference data on the whole) toeach other, using each terminal via communication network 2. Prior tothe video conference, the video conference participant 121 generates orselects the first secret-key Ks1 to transfer to the video conferenceparticipant 122 prior to the start of the video conference.

The video conference participant 122 receiving the first secret-key Ks1generates the second secret-key Ks2 by the first secret-key Ks1 usingthe video conference data management program P:

Ks 2=P(Ks 1).

The generated second secret-key Ks2 is stored in the terminal.

The video conference participant 121 encrypts the video conference dataMO with the first secret-key Ks1, in the video conference through thecommunication network 2:

CmOks 1=E(Ks 1,MO)

and transfers the encrypted video conference data CmOks1 to the videoconference participant 122.

The video conference participant 122 who receives the video conferencedata CmOks1 encrypted by the first secret-key Ks1 decrypts the videoconference data CmOks1 by the first secret-key Ks1:

M 0=D(ks 1,CmOks 1)

and uses decrypted video conference data MO.

Further, the second secret-key Ks2 is generated based on the firstsecret-key Ks1 with the video conference data management program P:

Ks 2=P(Ks 1).

In the case where the decrypted video conference data MO is stored inthe terminal of the participant 122 of the video conference, copied tothe data record medium 125, or transferred to the non-participant of thevideo conference via the communication network 2, the data M isencrypted by the second secret-key Ks2 using the video conference datamanagement program P:

Cmks 2=E(Ks 2,M).

The encrypted data Cmks2 is copied to the record medium 125 or suppliedto the non-participant of the video conference via the communicationnetwork 2, together with the video conference data name or the videoconference data number.

The non-participant of the video conference 123 who obtains theencrypted data CmKs2 requests of the participant 121 for the secondaryuse of the video conference data M from the terminal by specifying thename or number of the video conference data.

The participant 121 of the video conference who receives the request forthe second use of the data M finds out the first secret-key Ks1according to the name or the number of the video conference data name ornumber to generate the second secret-key Ks2 based on the firstsecret-key Ks1:

Ks 2=P(Ks 1)

and supplies the generated second secret-key Ks2 to the non-participantof the video conference 123.

The non-participant of video conference 123 who receives the secondsecret-key Ks2 decrypts the encrypted data Cmks2 by the secondsecret-key Ks2 by using the television conference data managementprogram P:

M=D(Ks 2,Cmks 2)

and then uses decrypted video conference data M.

In the case where the video conference data M is stored in the terminalof the non-participant of the video conference 123, copied to the recordmedium 126, or transmitted to the non-participant of the videoconference 124, the video conference data M is encrypted by the secondsecret-key Ks2 using the video conference data management program P:

Cmks 2=E(Ks 2,M)

Incidentally, the third secret-key Ks3 may be generated on the basis ofthe second secret-key Ks2 with the video conference data managementprogram P:

Ks 3=P(Ks 2),

and the data M can be encrypted with the video conference datamanagement program P by this generated third secret-key Ks3:

Cmks 3=E(Ks 3,M).

I claim:
 1. A data copyright management apparatus comprising: a CPU busconnectable to a system bus of a user terminal; a CPU connected to saidCPU bus, decrypting with a first secret-key digital data encrypted bysaid first secret-key, and before handling storage, copy and transferoperations on decrypted digital data, encrypting with a secondsecret-key the decrypted digital data; and an EEPROM connected to saidCPU bus, storing said second secret-key.
 2. A data copyright apparatusaccording to claim 1, wherein said EEPROM also stores said firstsecret-key.
 3. A data copyright management apparatus according to claim1, wherein said CPU further generates said second secret-key.
 4. A datacopyright management apparatus according to claim 1, wherein said secondsecret-key is externally supplied.
 5. A data copyright managementapparatus according to claim 1, further comprising a ROM connected tosaid CPU bus, storing a copyright management program.
 6. A datacopyright management apparatus according to claim 1, wherein said EEPROMfurther stores a copyright management program.
 7. A data copyrightmanagement apparatus according to claim 1, further comprising a RAMconnected to said CPU bus, storing a copyright management program.
 8. Adata copyright management apparatus according to any of claims 1 to 7,configured as an IC.
 9. A data copyright management apparatus accordingto any of claims 1 to 7, configured as an IC card.
 10. A data copyrightmanagement apparatus according to any of claims 1 to 7, configured as aPC card.
 11. A data copyright management apparatus according to any ofclaims 1 to 7, configured as an insertion board.
 12. A data copyrightmanagement apparatus comprising: a CPU bus connectable to a system busof a user terminal; a CPU connected to said CPU bus, decrypting with afirst secret-key digital data encrypted by said first secret-key, andbefore handling storage, copy, and transfer operations on decrypteddigital data, encrypting with a second secret-key the decrypted digitaldata; and a ROM connected to said CPU bus, storing a copyrightmanagement program.
 13. A data copyright management apparatus accordingto claim 12, wherein said ROM further stores said first secret-key. 14.A data copyright management apparatus according to claim 12, whereinsaid CPU further generates said second secret-key.
 15. A data copyrightmanagement apparatus according to claim 12, wherein said secondsecret-key is externally supplied.
 16. A data copyright managementapparatus according to claim 12, wherein said ROM further stores acopyright management program.
 17. A data copyright management apparatusaccording to claim 12, further comprising an EEPROM connected to saidCPU bus, storing a copyright management program.
 18. A data copyrightmanagement apparatus according to claim 12, further comprising a RAMconnected to said CPU bus, storing a copyright management program.
 19. Adata copyright management apparatus according to any of claims 12 to 18,configured as an IC.
 20. A data copyright management apparatus accordingto any of the claims 12 to 18, configured as an IC card.
 21. A datacopyright management apparatus according to any of claims 12 to 18,configured as a PC card.
 22. A data copyright management apparatusaccording to any of the claims 12 to 18, configured as an insertionboard.
 23. A data copyright management apparatus comprising: a CPU busconnectable to a system bus of a user terminal; a CPU connected to saidCPU bus decrypted with a first secret-key digital data encrypted by saidfirst secret-key, and before handling storage, copy, and transferoperations on decrypted digital data, encrypting with a secondsecret-key the decrypted digital data; and a RAM connected to said CPUbus, storing a copyright management program.
 24. A data copyrightmanagement apparatus according to claim 23, wherein said RAM furtherstores said first secret-key.
 25. A data copyright management apparatusaccording to claim 23, wherein said CPU further generates said secondsecret-key.
 26. A data copyright management apparatus according to claim23, wherein said second secret-key is externally supplied.
 27. A datacopyright management apparatus according to claim 23, further comprisinga ROM connected to said CPU bus, storing a copyright management program.28. A data copyright management apparatus according to claim 23, furthercomprising an EEPROM connected to said CPU bus, storing a copyrightmanagement program.
 29. A data copyright management apparatus accordingto claim 23, wherein said RAM also stores a copyright managementprogram.
 30. A data copyright management apparatus according to any ofclaims 23 to 29, configured as an IC.
 31. A data copyright managementapparatus according to any of claims 23 to 29, configured as an IC card.32. A data copyright management apparatus according to any of claims 23to 29, configured as a PC card.
 33. A data copyright managementapparatus according to any of claims 23 to 29, configured as aninsertion board.
 34. A data copyright management apparatus comprising: aCPU bus connectable to a system bus of a user terminal; a CPU connectedto said CPU bus, decrypting with a first secret-key digital dataencrypted by said first secret-key, before handling storage, copy andtransfer operations on decrypted digital data, encrypting with a secondsecret-key the decrypted digital data, and decrypting with a thirdsecret-key digital data which has been encrypted using said secondsecret-key and stored, copied, or transferred; and an EEPROM connectedto said CPU bus and storing said second secret-key.
 35. A data copyrightmanagement apparatus according to claim 34, wherein said thirdsecret-key is different from said first and second secret-keys.
 36. Adata copyright management apparatus according to claim 34, wherein saidthird secret-key is the same secret-key as said second secret-key.